Lucene search
+L

1694 matches found

CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•17 views

Adobe Substance3D 安全漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00295EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•15 views

Adobe Substance 3D Sampler 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00228EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•16 views

Adobe Substance 3D Sampler 安全漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. Adobe Substance 3D Designer suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00278EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•13 views

Adobe InDesign 安全漏洞

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.9AI score0.00322EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•16 views

Adobe Substance3D 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer versions and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.7AI score0.00242EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/26 1:15 p.m.•11 views

CVE-2025-0731

An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user...

6.5CVSS0.00725EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/13 12:00 a.m.•19 views

The vulnerability of the 7Z File Parser component, a archive file processor for the WinZip archive manager, allows a hacker to execute arbitrary code.

The vulnerability of the 7Z File Parser component, a archive file processor for the WinZip archive manager, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, by sending a...

7.8CVSS8.1AI score0.10311EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2025/02/11 6:15 p.m.•5 views

CVE-2025-21160

Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.3AI score0.00368EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•16 views

Adobe Illustrator 安全漏洞

Adobe Illustrator is a professional vector graphic design software developed by Adobe, widely used in graphic design, illustration creation, web design and other fields. A stack buffer overflow vulnerability exists in Adobe Illustrators in versions 29.1, 28.7.3 and earlier. The vulnerability is...

7.8CVSS7.8AI score0.00374EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/02/10 12:00 a.m.•49 views

IBM ApplinX Cross-Site Request Forgery Vulnerability

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.4AI score0.00147EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/02/10 12:00 a.m.•18 views

IBM ApplinX Cross-Site Request Forgery Vulnerability (CNVD-2025-06206)

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.4AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/06 12:00 a.m.•14 views

IBM ApplinX 跨站请求伪造漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.6AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/06 12:00 a.m.•19 views

IBM ApplinX 跨站请求伪造漏洞

IBM ApplinX is an International Business Machines IBM company focused on converting green screen interfaces into modern web-based applications. IBM ApplinX suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to construct a malicious URI, bait a request, an...

4.3CVSS6.6AI score0.00147EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/05 2:56 a.m.•18 views

CVE-2024-6596

An unauthenticated remote attacker can run malicious c code included in curve files and execute commands in the users context...

9.8CVSS7.8AI score0.00791EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/02/04 12:00 a.m.•7 views

VulnCheck KEV: CVE-2025-0411

7-Zip contains a protection mechanism failure vulnerability that allows remote attackers to bypass the Mark-of-the-Web security feature to execute arbitrary code in the context of the current user...

7CVSS8AI score0.67071EPSS
SaveIn wildExploits8References11
Zero Day Initiative
Zero Day Initiative
•added 2025/02/04 12:00 a.m.•14 views

Microsoft Edge ms-its: Scheme Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file while in Internet Explorer mode. The specific flaw...

7.5CVSS7.3AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/30 6:24 p.m.•32 views

CVE-2025-24502

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address...

5.3CVSS0.00221EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•14 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created...

7.8CVSS6.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•17 views

The vulnerability of the Substance 3D Stager software lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in buffer overflow attacks within the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS6.3AI score0.00259EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•14 views

The vulnerability of the Adobe Framemaker desktop publishing system arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker arises from an overflow in the buffer of the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS6.2AI score0.00503EPSS
SaveExploits0References3
Rows per page
Query Builder